[syslog-ng] Backslash before quote

Balazs Scheidler bazsi at balabit.hu
Wed Jun 10 16:55:44 CEST 2009


On Wed, 2009-06-10 at 15:04 +0100, Pennington, Philip wrote:
> Syslog-ng version 2.
> 
> Can anyone please explain the purpose of the backslash being added
> before each quote in syslog output ?
> 
> Is there any way to disable this feature ?   Is this
> flags(noparse) ?   
> 
> Is there any other way to do it (other than stripping it out on an
> output process)?
> 

you probably need template-escape(no)

this is the default setting starting from 3.0 and was introduced to
avoid SQL injections if using templates to format SQL INSERT statements.

since that use is replaced by the native SQL destination, the default
was changed with 3.0.

-- 
Bazsi



More information about the syslog-ng mailing list